<PackageReference Include="BouncyCastle.Cryptography" Version="2.7.0" />

Org.BouncyCastle.Pkix.NameConstraintRelation

The set relationship of one string-host name-constraint value to another, as classified by the Relate extension in NameConstraintUtilities. Because a host/mailbox is a single point and a domain is a subtree, two such constraints never partially overlap - the relationship is always exactly one of these four.
namespace Org.BouncyCastle.Pkix { internal enum NameConstraintRelation { Equal, Disjoint, Subsumes, SubsumedBy } }